Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:40901
HistoryJun 15, 2023 - 4:26 a.m.

Remote Code Execution (RCE)

2023-06-1504:26:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

58.5%

JSON

.NET is vulnerable to Remote Code Execution (RCE). The vulnerability exists due to the MSDIA SDK because corrupted PDBs can result in a heap overflow allowing an attacker to cause an application crash or remote code execution.

Related

prion 1
cve 1
osv 3
github 1
redhatcve 1
ubuntucve 1
mscve 1
alpinelinux 1
mskb 22
openvas 4
malwarebytes 1
nessus 2
ics 1
qualysblog 1
kaspersky 1
rapid7blog 1
prion
prion
Remote code execution
2023-06-14 15:15:00
cve
cve
CVE-2023-24897
2023-06-14 15:15:09
osv
osv
.NET Remote Code Execution Vulnerability
2023-06-14 17:01:16
BIT-dotnet-sdk-2023-24897
2024-03-06 10:56:35
BIT-dotnet-2023-24897
2024-03-06 10:56:27
github
github
.NET Remote Code Execution Vulnerability
2023-06-14 17:01:16
redhatcve
redhatcve
CVE-2023-24897
2023-06-14 05:48:53
ubuntucve
ubuntucve
CVE-2023-24897
2023-06-14 00:00:00
mscve
mscve
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
2023-06-13 07:00:00
alpinelinux
alpinelinux
CVE-2023-24897
2023-06-14 15:15:09
mskb
mskb
Description of the security update for the remote code execution vulnerability in Microsoft Visual Studio 2013 Update 5: June 13, 2023 (KB5026610)
2023-06-13 07:00:00
Description of the security update for the remote code execution vulnerability in Microsoft Visual Studio 2015 Update 3: June 13, 2023 (KB5025792)
2023-06-13 07:00:00
June 13, 2023-Security Only Update for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 (KB5027531)
2023-06-13 07:00:00
openvas
openvas
Microsoft .NET Framework Multiple Vulnerabilities (KB5027537)
2023-06-14 00:00:00
Microsoft .NET Framework Multiple Vulnerabilities (KB5027538)
2023-06-14 00:00:00
.NET Core Multiple Vulnerabilities - Windows
2023-06-14 00:00:00
malwarebytes
malwarebytes
Microsoft fixes six critical vulnerabilities in June Patch Tuesday
2023-06-14 05:00:00
nessus
nessus
Security Updates for Microsoft .NET Framework (June 2023)
2023-06-16 00:00:00
Security Updates for Microsoft Visual Studio Products (June 2023)
2023-06-13 00:00:00
ics
ics
Siemens PNI
2023-11-16 12:00:00
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday, June 2023 Security Update Review
2023-06-13 19:58:29
kaspersky
kaspersky
KLA50317 Multiple vulnerabilities in Microsoft Developer Tools
2023-06-13 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - June 2023
2023-06-13 20:49:27

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

58.5%

JSON
Related for VERACODE:40901
prion1cve1osv3github1redhatcve1ubuntucve1mscve1alpinelinux1mskb22openvas4malwarebytes1nessus2ics1qualysblog1kaspersky1rapid7blog1